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NCI-061 



On page 15, line 2; insert/ 'Note the higher level party should also remove 
such a compromised root certificate by removing the root certificate from its 



RSIO.y/after -pairs--. 

^ 



On page 16, line 9: replace "trust and delegation" witli"trust/delegation' 



/ 

55 



On page 18, line 9: add/ An SP can make an RSIO for each OEM or can 



make a single RSIO for several OEMS, or a combination thereof." 



On page 20, line 2: delete "client-". 




On page 20, line 22: repTac^tr^t-delegation" wrtiT^frust/delegat 



ion". 



IN THE DRAWINGS 



Please amend FIG. 5 as shown in the accompanying drawing sheets, in 
which the proposed amendments are indicated in red ink. 



Please delete FIG. 8. 



SAMPLE TRUST/DELEGATION VECTOR 



1 



BIT 


r : ™ ^1 

DESCRIPTION 


0 


CA trusted to issue certificates for SSL clients 


1 


CA trusted to issue certificates for SSL servers 


2 


CA trusted to issue certificates for SP clients 


3 


CA trusted to issue certificates for SP servers 


4 


CA trusted to issue certificates for SP system software publishers 


5 


CA trusted to issue certificates for SP application software publishers 


6 


CA trusted to issue certificates for step-up encryption servers 


7 


Entity trusted as OEM, can issue OEM RSIOs 
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Entity trusted as SP, can issue SP RSIOs 
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SP server instance 


10 


SP system software publisher 


11 


Application software publisher 



